Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: KcoHMXop8yhpA08qVb6vHiaIx5yRxwGLh/b7TU2WPso=
Subject key identifier: 6F:D8:63:D4:B4:5F:26:44:59:B8:D2:7D:4C:0E:CC:B4:95:67:9A:76
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 019CAC0FB5E686B1CD985BC0821C3E9A4CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 0F1E
Signing time: Mon 02 Mar 2026 01:00:36 +0000
Manifest this update: Mon 02 Mar 2026 01:00:36 +0000
Manifest next update: Tue 03 Mar 2026 01:00:36 +0000
Files and hashes: 1: KuefoOzdZ9vrXjVoaWqLBNOd8Fc.roa (hash: Tr2+OxM2L2vZYYtrtzp3JmsEgxHYlAlF0KBqV8P0L1o=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: 51evxqNBg5kmmCwRnRJmLzLh+qGiRYgFJM8jOX05/gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b5:e6:86:b1:cd:98:5b:c0:82:1c:3e:9a:4c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Mar 2 01:00:36 2026 GMT
Not After : Mar 3 01:00:36 2026 GMT
Subject: CN=6fd863d4b45f264459b8d27d4c0eccb495679a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:6b:fe:1f:12:e8:dd:d9:41:b8:fb:a5:22:
23:7f:0e:81:80:a5:7b:4e:51:81:5b:6e:d5:4f:de:
5e:47:fc:47:a2:d8:29:0d:30:46:8b:f3:5d:d7:e2:
18:cc:cf:c9:11:9e:4e:92:65:1a:b7:8a:8b:01:29:
a8:92:18:9e:8d:05:ca:75:c3:4c:85:e7:28:7a:97:
68:d2:5a:e6:5a:1d:ff:2e:2a:5a:46:e3:6f:b4:a9:
e5:54:f6:5e:e0:38:e0:a8:11:49:4a:0c:14:5b:23:
f6:7d:75:c2:bc:40:91:46:ff:6a:3d:f8:6c:d3:56:
1c:ee:13:03:4f:c6:5b:1a:a3:09:f9:15:2b:b0:4e:
ce:8b:bc:e8:b3:1a:48:5e:f3:e1:86:24:d7:16:16:
1b:e9:a1:89:59:64:85:80:d2:d9:50:15:c7:33:85:
9e:37:f7:f9:ab:24:26:68:25:e8:f9:02:2f:99:8d:
ee:31:1d:07:b6:67:ea:ff:d9:02:a3:94:87:62:3d:
24:74:3b:1f:9e:2c:3d:25:b8:7b:50:0a:19:98:3a:
9c:1c:29:97:d0:f9:2f:6f:1e:fb:99:2d:e5:ed:41:
9b:08:33:36:7e:d8:5c:28:1c:4a:29:72:18:85:82:
df:b4:eb:24:68:d1:79:49:a5:d3:49:fa:fb:e5:f3:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D8:63:D4:B4:5F:26:44:59:B8:D2:7D:4C:0E:CC:B4:95:67:9A:76
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8e:71:00:a5:20:60:70:c9:35:60:3f:0e:a8:53:27:38:60:
f8:d1:3a:a7:3f:04:73:0e:e8:93:31:1f:d0:ae:36:3b:5e:c5:
f2:9a:1c:a3:22:94:40:16:58:1b:2c:b5:80:3e:4a:8b:b5:5c:
01:e4:fb:82:41:f7:f4:dd:f5:e1:65:a5:b5:72:48:dd:10:a2:
78:60:d3:1f:2f:54:af:74:5a:3c:8f:8f:dd:22:8c:e4:ed:37:
6a:59:2c:5a:ef:aa:06:ab:b5:d9:73:8f:ca:15:26:d2:a2:4c:
66:13:47:db:e3:51:5c:a5:9f:51:9e:b8:5c:3b:84:27:5b:4d:
87:10:31:50:75:97:86:77:fc:29:5f:b6:79:9f:a0:fe:a5:81:
ad:6c:e7:1c:ea:52:07:80:02:ae:34:31:84:db:b2:c6:01:c3:
3a:d2:08:dd:bf:73:7d:76:f0:a5:39:d7:b1:b8:ac:1e:91:8c:
5d:0c:aa:b4:41:2b:35:d6:ff:7d:f5:45:c6:c8:fd:0b:05:f4:
18:79:be:cf:91:b0:60:ce:36:6e:50:49:ab:d1:57:84:4b:7e:
18:e6:19:53:03:60:2a:07:c6:03:46:e5:3e:00:47:df:ab:6a:
3f:ec:04:74:0e:3a:eb:86:77:dc:55:e9:11:62:f1:24:32:2f:
e8:b0:fb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:28 2026 by rpki-client